From 19e3d9e6894f55bf5d7b2a3ea6e04d10a7e6c8a4 Mon Sep 17 00:00:00 2001
From: Ylian Saint-Hilaire <ysainthilaire@hotmail.com>
Date: Mon, 29 Jun 2020 15:14:07 -0700
Subject: [PATCH] Added per-domain ignoreagenthashcheck.

---
 meshagent.js | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/meshagent.js b/meshagent.js
index 39bd0ec5..7104d96d 100644
--- a/meshagent.js
+++ b/meshagent.js
@@ -387,7 +387,7 @@ module.exports.CreateMeshAgent = function (parent, db, ws, req, args, domain) {
                 if ((msg.length != 98) || ((obj.receivedCommands & 1) != 0)) return;
                 obj.receivedCommands += 1; // Agent can't send the same command twice on the same connection ever. Block DOS attack path.
 
-                if (args.ignoreagenthashcheck === true) {
+                if ((args.ignoreagenthashcheck === true) || (domain.ignoreagenthashcheck === true)) {
                     // Send the agent web hash back to the agent
                     // Send 384 bits SHA384 hash of TLS cert + 384 bits nonce
                     obj.sendBinary(common.ShortToStr(1) + msg.substring(2, 50) + obj.nonce); // Command 1, hash + nonce. Use the web hash given by the agent.
@@ -1037,7 +1037,7 @@ module.exports.CreateMeshAgent = function (parent, db, ws, req, args, domain) {
 
     // Verify the agent signature
     function processAgentSignature(msg) {
-        if (args.ignoreagenthashcheck !== true) {
+        if ((args.ignoreagenthashcheck !== true) && (domain.ignoreagenthashcheck !== true)) {
             var verified = false;
 
             if (msg.length != 384) {